How to correlate Dynatrace and VMware alerts based on related CIs in ServiceNow Event Management

ramya_mg
Tera Contributor

2 hours ago

We are trying to correlate alerts from Dynatrace and VMware vRealize in ServiceNow Event Management based on the relationship between their associated CIs.

Our scenario is:

  • The Dynatrace alert is bound to CI-A.
  • The VMware vRealize alert is bound to CI-B.
  • CI-A and CI-B have a relationship in CMDB.
  • The expected result is for the Dynatrace alert to be the primary alert and the VMware vRealize alert to be the secondary alert.

We have configured an Alert Correlation Rule with a script for this requirement.

From the script logs, the logic appears to be executing correctly, and the script is able to identify the relationship between the two CIs. However, even though the CI relationship is found, the alerts are not getting tagged/correlated as primary and secondary alerts.

Could you please advise:

  1. Is there any additional configuration required for the correlation rule to create the primary/secondary alert relationship after the script identifies the related CIs?
  2. Are there any specific conditions, Event Management settings, or limitations we should check when correlating alerts associated with different but related CIs?
  3. Is there a recommended approach for troubleshooting why the CI relationship is successfully identified but the actual alert correlation is not happening?

Any suggestions or similar implementation examples would be greatly appreciated.

Thanks!

0 Helpfuls
  • 73 Views
1 REPLY 1

sivasankaris
Tera Guru

an hour ago

Hi @ramya_mg,  Could you share the script will check whether is there anything wrong in the script

0 Helpfuls